Vulnerability Details CVE-2022-33939
CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.1%
CVSS Severity
CVSS v3 Score 7.5
References
- https://jvn.jp/vu/JVNVU94343729/index.html
- https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf
- https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf
- https://jvn.jp/vu/JVNVU94343729/index.html
- https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf
- https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf
Products affected by CVE-2022-33939
-
cpe:2.3:h:yokogawa:centum_cs_3000_cp31:-
-
cpe:2.3:h:yokogawa:centum_cs_3000_cp33:-
-
cpe:2.3:h:yokogawa:centum_cs_3000_cp345:-
-
cpe:2.3:h:yokogawa:centum_cs_3000_cp401:-
-
cpe:2.3:h:yokogawa:centum_cs_3000_cp451:-
-
cpe:2.3:h:yokogawa:centum_vp_3000_cp401:-
-
cpe:2.3:h:yokogawa:centum_vp_3000_cp451:-
-
cpe:2.3:o:yokogawa:centum_cs_3000_cp31_firmware:-
-
cpe:2.3:o:yokogawa:centum_cs_3000_cp33_firmware:-
-
cpe:2.3:o:yokogawa:centum_cs_3000_cp345_firmware:-
-
cpe:2.3:o:yokogawa:centum_cs_3000_cp401_firmware:-
-
cpe:2.3:o:yokogawa:centum_cs_3000_cp451_firmware:-
-
cpe:2.3:o:yokogawa:centum_vp_3000_cp401_firmware:*
-
cpe:2.3:o:yokogawa:centum_vp_3000_cp451_firmware:*